Hallo...

Ich habe seit einiger Zeit ein Problem.
Wenn ich durch das Internet surfe kommt plötzlich auf dem Bildschirm eine "Java Script "Meldung, indem mir vorgeworfen wird eine Straftat begangen zu haben.
Ich soll 100€ zahlen oder mein PC wird gesperrt.
Nur mit viel Glück kann ich dann den Browser schließen.(während ich auf beenden klicke bei der Meldung)und den Browser oben mit dem roten Kreutz beende)
sonnst währe ein weiterarbeiten nicht möglich.
Nun habe ich die Befürchtung..das es ein Trojaner ist.
Nur wie bekomme ich den nun wieder los ?

Über baldige Hilfe würde ich mich sehr freuen.

Gruss
x-tro

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!



Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:13-08-2015
durchgeführt von G.S (Administrator) auf GS-PC (13-08-2015 22:50:54)
Gestartet von D:\download2
Geladene Profile: G.S (Verfügbare Profile: G.S & DefaultAppPool)
Platform: Microsoft Windows 10 Pro (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Edge)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(IObit) C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe
(AMD) C:\Windows\System32\atiesrxx.exea
(AMD) C:\Windows\System32\atieclxx.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
(IObit) C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
() C:\Program Files\Free Desktop Clock\timeserv.exe
(Symantec Corporation) C:\Program Files\Norton 360\Engine\22.5.2.15\N360.exe
() C:\Windows\System32\PnkBstrA.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(SigmaTel, Inc.) C:\Program Files\SigmaTel\C-Major Audio\WDM\stacsv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
(IObit) C:\Program Files\IObit\Advanced SystemCare 8\Monitor.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.28.1\GoogleCrashHandler.exe
(Symantec Corporation) C:\Program Files\Norton 360\Engine\22.5.2.15\N360.exe
(Microsoft Corporation) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
(SigmaTel, Inc.) C:\Windows\sttray.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Drive Software Company) C:\Program Files\Free Desktop Clock\FreeDesktopClock.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Users\G.S\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe [748744 2015-07-15] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SigmatelSysTrayApp] => C:\WINDOWS\sttray.exe [303104 2007-01-12] (SigmaTel, Inc.)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-19\...\Run: [OneDriveSetup] => C:\Windows\System32\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-20\...\Run: [OneDriveSetup] => C:\Windows\System32\OneDriveSetup.exe [7805120 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\Run: [AtomicAlarmClock6] => C:\Program Files\Free Desktop Clock\FreeDesktopClock.exe [3085824 2013-06-27] (Drive Software Company)
HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\Run: [OneDrive] => C:\Users\G.S\AppData\Local\Microsoft\OneDrive\OneDrive.exe [402632 2015-08-06] (Microsoft Corporation)
HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\Run: [Advanced SystemCare 8] => C:\Program Files\IObit\Advanced SystemCare 8\ASCTray.exe [2428704 2015-01-20] (IObit)
HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6278424 2015-04-23] (Piriform Ltd)
ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton 360\Engine\22.5.2.15\buShell.dll [2015-07-13] (Symantec Corporation)
ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton 360\Engine\22.5.2.15\buShell.dll [2015-07-13] (Symantec Corporation)
ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton 360\Engine\22.5.2.15\buShell.dll [2015-07-13] (Symantec Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll [2015-08-06] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll [2015-08-06] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll [2015-08-06] (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=de&pid=N360&pvid=21.6.0.32
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/de-de/?pc=UP97&ocid=UP97DHP
HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {e4a1ece8-ed94-4f93-80ea-75f978ceaf24} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000 -> {e4a1ece8-ed94-4f93-80ea-75f978ceaf24} URL =
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton 360\Engine\22.5.2.15\coIEPlg.dll [2015-07-10] (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-08-13] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-13] (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\22.5.2.15\coIEPlg.dll [2015-07-10] (Symantec Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{41792810-eabe-43a5-8064-f00209ef9334}: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\G.S\AppData\Roaming\Mozilla\Firefox\Profiles\ugsc1pl5.default
FF SearchEngineOrder.3: Bing
FF Homepage: about:home
FF DefaultSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-12] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2015-06-08] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-08-13] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-08-13] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2015-03-08] (Nexon)
FF Plugin: @nullsoft.com/winampDetector;version=1 -> C:\Program Files\Winamp Detect\npwachk.dll [2013-12-13] (Nullsoft, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-1041671278-1757929836-1891683304-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2015-06-08] (Tracker Software Products (Canada) Ltd.)
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-05-01]
FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.5.2.15\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.5.2.15\coFFPlgn [2015-08-13]
FF Extension: Kein Name - C:\Users\G.S\AppData\Roaming\Mozilla\Firefox\Profiles\ugsc1pl5.default\extensions\iobitascsurfingprotection@iobit.com [nicht gefunden]

Chrome:
=======
CHR Profile: C:\Users\G.S\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\G.S\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-06-01]
CHR Extension: (YouTube) - C:\Users\G.S\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-06-01]
CHR Extension: (Google Search) - C:\Users\G.S\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-06-01]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\G.S\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-06-01]
CHR Extension: (Chrome Web Store Payments) - C:\Users\G.S\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-06-01]
CHR Extension: (Late Night) - C:\Users\G.S\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgbdhkpacgdhfabeceekiafonfkipohm [2015-06-01]
CHR Extension: (Gmail) - C:\Users\G.S\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-01]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files\Norton 360\Engine\22.5.2.15\Exts\Chrome.crx [2015-08-07]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - https://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeActiveFileMonitor7.0; C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [169312 2008-09-16] (Adobe Systems Incorporated)
R2 AdvancedSystemCareService8; C:\Program Files\IObit\Advanced SystemCare 8\ASCService.exe [815392 2014-11-04] (IObit)
R2 AtomicAlarmClock; C:\Program Files\Free Desktop Clock\timeserv.exe [2007040 2013-04-24] () [Datei ist nicht signiert]
S3 BEService; C:\Program Files\Common Files\BattlEye\BEService.exe [921088 2015-08-01] ()
R2 CoreMessagingRegistrar; C:\WINDOWS\system32\coremessaging.dll [588800 2015-08-06] (Microsoft Corporation)
S3 diagnosticshub.standardcollector.service; C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe [23040 2015-07-10] (Microsoft Corporation)
S3 DmEnrollmentSvc; C:\WINDOWS\system32\Windows.Internal.Management.dll [193024 2015-07-10] (Microsoft Corporation)
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2014-12-19] (Macrovision Europe Ltd.) [Datei ist nicht signiert]
R2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-08-09] (IObit)
S4 MBAMScheduler; D:\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; D:\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 MSMQ; C:\WINDOWS\system32\mqsvc.exe [24576 2015-08-06] (Microsoft Corporation)
R2 N360; C:\Program Files\Norton 360\Engine\22.5.2.15\N360.exe [282016 2015-07-16] (Symantec Corporation)
R2 OneSyncSvc_Session1; C:\WINDOWS\system32\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 PimIndexMaintenanceSvc_Session1; C:\WINDOWS\system32\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2014-11-09] ()
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2014.SP3\RpcAgentSrv.exe [73712 2014-08-16] (SiSoftware) [Datei ist nicht signiert]
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S3 SensorDataService; C:\WINDOWS\System32\SensorDataService.exe [669696 2015-08-06] (Microsoft Corporation)
R2 STacSV; C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe [90112 2007-01-12] (SigmaTel, Inc.) [Datei ist nicht signiert]
S3 UnistoreSvc_Session1; C:\WINDOWS\System32\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 UserDataSvc_Session1; C:\WINDOWS\system32\svchost.exe [35176 2015-07-10] (Microsoft Corporation)
S3 w3logsvc; C:\WINDOWS\system32\inetsrv\w3logsvc.dll [72192 2015-08-06] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [277760 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23264 2015-07-10] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT3.sys [82432 2015-05-28] (Advanced Micro Devices)
R1 BasicRender; C:\WINDOWS\System32\drivers\BasicRender.sys [30720 2015-07-10] (Microsoft Corporation)
R1 BHDrvx86; C:\Program Files\Norton 360\NortonData\22.5.2.15\Definitions\BASHDefs\20150810.001_9b5\BHDrvx86.sys [1181936 2015-08-10] (Symantec Corporation)
S3 buttonconverter; C:\WINDOWS\System32\drivers\buttonconverter.sys [23552 2015-07-10] (Microsoft Corporation)
S3 CapImg; C:\WINDOWS\System32\drivers\capimg.sys [96768 2015-07-10] (Microsoft Corporation)
R1 ccSet_N360; C:\WINDOWS\system32\drivers\N360\1605020.00F\ccSetx86.sys [137456 2015-07-11] (Symantec Corporation)
R3 CompositeBus; C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_x86_a4832450a7024d49\CompositeBus.sys [31232 2015-07-10] (Microsoft Corporation)
S3 eapihdrv; C:\Users\G.S\AppData\Local\Temp\ehdrv.sys [135760 2015-08-12] (ESET)
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [389456 2015-07-27] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [122192 2015-07-27] (Symantec Corporation)
S3 EsgScanner; C:\WINDOWS\System32\DRIVERS\EsgScanner.sys [19984 2015-08-09] ()
S3 fcvsc; C:\WINDOWS\System32\drivers\fcvsc.sys [24064 2015-07-10] (Microsoft Corporation)
R1 FileCrypt; C:\WINDOWS\System32\drivers\filecrypt.sys [74240 2015-07-10] (Microsoft Corporation)
S3 genericusbfn; C:\WINDOWS\System32\drivers\genericusbfn.sys [17408 2015-07-10] (Microsoft Corporation)
S3 GPIO; C:\WINDOWS\System32\drivers\iaiogpio.sys [22016 2015-07-10] (Intel Corporation)
R1 GpuEnergyDrv; C:\WINDOWS\System32\drivers\gpuenergydrv.sys [7680 2015-07-10] (Microsoft Corporation)
S3 hidinterrupt; C:\WINDOWS\System32\drivers\hidinterrupt.sys [37728 2015-07-10] (Microsoft Corporation)
R1 IDSVix86; C:\Program Files\Norton 360\NortonData\22.5.2.15\Definitions\IPSDefs\20150812.001\IDSvix86.sys [523512 2015-08-07] (Symantec Corporation)
S3 IoQos; C:\WINDOWS\System32\drivers\ioqos.sys [23040 2015-07-10] (Microsoft Corporation)
R2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [18048 2015-05-17] () [Datei ist nicht signiert]
S0 LSI_SAS2i; C:\WINDOWS\System32\drivers\lsi_sas2i.sys [88928 2015-07-10] (LSI Corporation)
S0 LSI_SAS3i; C:\WINDOWS\System32\drivers\lsi_sas3i.sys [83296 2015-07-10] (Avago Technologies)
S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [51928 2015-06-18] (Malwarebytes Corporation)
S0 megasas; C:\WINDOWS\System32\drivers\megasas.sys [52064 2015-07-10] (Avago Technologies)
R2 MMCSS; C:\WINDOWS\system32\drivers\mmcss.sys [37376 2015-07-10] (Microsoft Corporation)
R3 MQAC; C:\WINDOWS\System32\drivers\mqac.sys [130048 2015-08-06] (Microsoft Corporation)
R3 NAVENG; C:\Program Files\Norton 360\NortonData\22.5.2.15\Definitions\VirusDefs\20150813.001\NAVENG.SYS [104440 2015-08-12] (Symantec Corporation)
R3 NAVEX15; C:\Program Files\Norton 360\NortonData\22.5.2.15\Definitions\VirusDefs\20150813.001\NAVEX15.SYS [1645432 2015-08-12] (Symantec Corporation)
S3 netvsc; C:\WINDOWS\System32\drivers\netvsc.sys [80384 2015-07-10] (Microsoft Corporation)
S3 PDNMp50; C:\Windows\system32\drivers\PDNMp50.sys [28224 2006-11-28] (Printing Communications Assoc., Inc. (PCAUSA))
S3 PDNSp50; C:\Windows\system32\drivers\PDNSp50.sys [27072 2006-11-28] (Printing Communications Assoc., Inc. (PCAUSA))
S0 percsas2i; C:\WINDOWS\System32\drivers\percsas2i.sys [51040 2015-07-10] (LSI Corporation)
S0 percsas3i; C:\WINDOWS\System32\drivers\percsas3i.sys [51552 2015-07-10] (Avago Technologies)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2014.SP3\WNt500x86\Sandra.sys [23112 2009-08-07] (SiSoftware)
R3 SRTSP; C:\WINDOWS\system32\drivers\N360\1605020.00F\SRTSP.SYS [711408 2015-07-11] (Symantec Corporation)
R1 SRTSPX; C:\WINDOWS\system32\drivers\N360\1605020.00F\SRTSPX.SYS [44792 2015-07-11] (Symantec Corporation)
R3 STHDA; C:\WINDOWS\system32\drivers\stwrt.sys [647680 2007-01-12] (SigmaTel, Inc.)
R2 storqosflt; C:\WINDOWS\System32\drivers\storqosflt.sys [52736 2015-07-10] (Microsoft Corporation)
S0 storufs; C:\WINDOWS\System32\drivers\storufs.sys [33632 2015-07-10] (Microsoft Corporation)
R3 swenum; C:\WINDOWS\System32\DriverStore\FileRepository\swenum.inf_x86_b6707c73599dd1b6\swenum.sys [16224 2015-07-10] (Microsoft Corporation)
R0 SymEFASI; C:\WINDOWS\System32\drivers\N360\1605020.00F\SYMEFASI.SYS [1286896 2015-07-11] (Symantec Corporation)
S0 SymELAM; C:\WINDOWS\System32\drivers\N360\1605020.00F\SYMELAM.SYS [22144 2015-07-11] (Symantec Corporation)
R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT.SYS [103152 2015-08-07] (Symantec Corporation)
R1 SymIRON; C:\WINDOWS\system32\drivers\N360\1605020.00F\Ironx86.SYS [234744 2015-07-11] (Symantec Corporation)
R1 SymNetS; C:\WINDOWS\system32\drivers\N360\1605020.00F\SYMNETS.SYS [429816 2015-07-11] (Symantec Corporation)
S3 tap0901; C:\WINDOWS\System32\DRIVERS\tap0901.sys [35288 2013-09-10] (The OpenVPN Project)
S3 UcmCx0101; C:\WINDOWS\System32\Drivers\UcmCx.sys [45056 2015-07-10] (Microsoft Corporation)
S3 UcmUcsi; C:\WINDOWS\System32\drivers\UcmUcsi.sys [32768 2015-08-06] (Microsoft Corporation)
S3 UdeCx; C:\WINDOWS\System32\drivers\udecx.sys [31744 2015-07-10] ()
S3 Ufx01000; C:\WINDOWS\System32\drivers\ufx01000.sys [190816 2015-07-10] (Microsoft Corporation)
S3 UfxChipidea; C:\WINDOWS\System32\drivers\UfxChipidea.sys [73568 2015-07-10] (Microsoft Corporation)
S3 ufxsynopsys; C:\WINDOWS\System32\drivers\ufxsynopsys.sys [100704 2015-07-10] (Microsoft Corporation)
S3 UrsChipidea; C:\WINDOWS\System32\drivers\urschipidea.sys [21856 2015-07-10] (Microsoft Corporation)
S3 UrsCx01000; C:\WINDOWS\System32\drivers\urscx01000.sys [42848 2015-07-10] (Microsoft Corporation)
S3 UrsSynopsys; C:\WINDOWS\System32\drivers\urssynopsys.sys [21856 2015-07-10] (Microsoft Corporation)
S3 VASDeviceDrm; C:\WINDOWS\System32\drivers\vasdDev.sys [1449536 2011-02-11] (ShiningMorning Inc.)
S3 vhf; C:\WINDOWS\System32\drivers\vhf.sys [24064 2015-07-10] (Microsoft Corporation)
S3 wdiwifi; C:\WINDOWS\System32\DRIVERS\wdiwifi.sys [488960 2015-08-12] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [97632 2015-07-10] (Microsoft Corporation)
R0 WindowsTrustedRT; C:\WINDOWS\System32\drivers\WindowsTrustedRT.sys [86552 2015-07-10] (Microsoft Corporation)
R0 WindowsTrustedRTProxy; C:\WINDOWS\System32\drivers\WindowsTrustedRTProxy.sys [15384 2015-07-10] (Microsoft Corporation)
R0 Wof; C:\WINDOWS\system32\Drivers\Wof.sys [173408 2015-08-12] (Microsoft Corporation)
S3 xboxgip; C:\WINDOWS\System32\drivers\xboxgip.sys [186368 2015-07-10] (Microsoft Corporation)
S3 xinputhid; C:\WINDOWS\System32\drivers\xinputhid.sys [18432 2015-07-10] (Microsoft Corporation)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
U3 idsvc; kein ImagePath
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
U3 wpcsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

NETSVC: NetSetupSvc -> C:\Windows\System32\NetSetupSvc.dll (Microsoft Corporation)
NETSVC: DcpSvc -> C:\Windows\system32\dcpsvc.dll (Microsoft Corporation)
NETSVC: UserManager -> C:\Windows\System32\usermgr.dll (Microsoft Corporation)
NETSVC: dosvc -> C:\Windows\system32\dosvc.dll (Microsoft Corporation)
NETSVC: dmwappushservice -> C:\Windows\system32\dmwappushsvc.dll (Microsoft Corporation)
NETSVC: XboxNetApiSvc -> C:\Windows\system32\XboxNetApiSvc.dll (Microsoft Corporation)
NETSVC: UsoSvc -> C:\Windows\system32\usocore.dll (Microsoft Corporation)
NETSVC: RetailDemo -> C:\Windows\system32\RDXService.dll (Microsoft Corporation)
NETSVC: DmEnrollmentSvc -> C:\Windows\system32\Windows.Internal.Management.dll (Microsoft Corporation)
NETSVC: XblAuthManager -> C:\Windows\System32\XblAuthManager.dll (Microsoft Corporation)
NETSVC: XblGameSave -> C:\Windows\System32\XblGameSave.dll (Microsoft Corporation)

==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-13 22:50 - 2015-08-13 22:51 - 00000000 ____D C:\FRST
2015-08-13 22:08 - 2015-08-13 22:08 - 00000666 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-08-13 22:08 - 2015-06-18 08:41 - 00094936 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-08-13 22:08 - 2015-06-18 08:41 - 00051928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-08-13 22:08 - 2015-06-18 08:41 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-08-13 20:43 - 2015-08-13 20:43 - 00001258 _____ C:\Users\Public\Desktop\PDF-Viewer.lnk
2015-08-13 20:43 - 2015-08-13 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange PDF Viewer
2015-08-13 20:43 - 2015-08-13 20:43 - 00000000 ____D C:\Program Files\Tracker Software
2015-08-13 20:40 - 2015-08-13 20:41 - 17294728 _____ (Tracker Software Products Ltd ) C:\WINDOWS\system32\PDFXVwer.exe
2015-08-13 19:45 - 2015-08-13 19:45 - 00016148 _____ C:\WINDOWS\system32\GS-PC_G.S_HistoryPrediction.bin
2015-08-13 18:21 - 2015-08-13 18:21 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2015-08-13 18:21 - 2015-08-13 18:21 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2015-08-13 18:21 - 2015-08-13 18:21 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2015-08-13 18:21 - 2015-08-13 18:21 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2015-08-13 18:21 - 2015-08-13 18:21 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik
2015-08-13 18:21 - 2015-08-13 18:21 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder
2015-08-13 18:21 - 2015-08-13 18:21 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-08-13 18:21 - 2015-08-13 18:21 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2015-08-13 18:21 - 2015-08-13 18:21 - 00000000 ____D C:\Users\DefaultAppPool
2015-08-13 18:21 - 2015-08-12 19:06 - 00000000 ___RD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-13 18:21 - 2015-08-06 19:43 - 00000000 ____D C:\Users\DefaultAppPool\Documents\Visual Studio 2008
2015-08-13 18:21 - 2015-08-06 19:43 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Local\Microsoft Help
2015-08-13 18:21 - 2015-07-10 10:28 - 00000000 __RSD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-08-13 18:21 - 2015-07-10 10:28 - 00000000 ___RD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-13 18:21 - 2015-07-10 10:28 - 00000000 ___RD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-13 18:21 - 2015-07-10 10:28 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-08-13 18:21 - 2014-08-05 20:34 - 00002082 _____ C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-08-13 16:58 - 2015-08-13 16:58 - 00000000 ____D C:\Program Files\Common Files\Java
2015-08-13 16:58 - 2015-08-13 16:57 - 00096352 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-08-13 01:41 - 2015-08-08 17:38 - 00794088 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-08-13 01:41 - 2015-08-08 17:38 - 00179688 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-08-12 21:58 - 2015-08-12 22:56 - 00000000 ____D C:\ProgramData\F-Secure
2015-08-12 21:58 - 2015-08-12 21:58 - 00000000 ____D C:\Users\G.S\AppData\Local\F-Secure
2015-08-12 21:17 - 2015-08-12 21:17 - 00002204 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2015-08-12 21:17 - 2015-08-12 21:17 - 00002192 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2015-08-12 21:17 - 2015-08-12 21:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2015-08-12 21:17 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean.exe
2015-08-12 18:02 - 2015-08-12 18:02 - 00002259 _____ C:\WINDOWS\epplauncher.mif
2015-08-12 17:57 - 2015-08-12 17:57 - 20857848 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 19323392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 18805248 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 13025792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 11262464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 06878256 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 06264160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-08-12 17:57 - 2015-08-12 17:57 - 03025408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 02987008 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-08-12 17:57 - 2015-08-12 17:57 - 02151208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 01985024 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 01917440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 01916416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 01823232 _____ C:\WINDOWS\system32\InputService.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 01709920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2015-08-12 17:57 - 2015-08-12 17:57 - 01593856 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 01535032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 01499136 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 01162240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 01134592 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-08-12 17:57 - 2015-08-12 17:57 - 00995840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00990720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00821248 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfuimanager.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00719360 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00700256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-08-12 17:57 - 2015-08-12 17:57 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00644128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00539728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-08-12 17:57 - 2015-08-12 17:57 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdbui.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00503600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00494592 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2015-08-12 17:57 - 2015-08-12 17:57 - 00445952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00436064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2015-08-12 17:57 - 2015-08-12 17:57 - 00415072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-08-12 17:57 - 2015-08-12 17:57 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00334176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2015-08-12 17:57 - 2015-08-12 17:57 - 00311808 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe
2015-08-12 17:57 - 2015-08-12 17:57 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe
2015-08-12 17:57 - 2015-08-12 17:57 - 00200704 _____ C:\WINDOWS\system32\TextInputFramework.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00197472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys
2015-08-12 17:57 - 2015-08-12 17:57 - 00195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_UserAccount.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00173408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2015-08-12 17:57 - 2015-08-12 17:57 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModelShim.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkStatus.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00085344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
2015-08-12 17:57 - 2015-08-12 17:57 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 00042904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wpcfltr.sys
2015-08-12 17:57 - 2015-08-12 17:57 - 00036704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpiowin32.sys
2015-08-12 17:35 - 2015-08-13 17:23 - 00000000 ____D C:\Users\G.S\Desktop\Neuer Ordner (2)
2015-08-12 17:22 - 2015-08-12 17:22 - 53415936 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit
2015-08-12 17:22 - 2015-08-12 17:22 - 00344064 _____ C:\WINDOWS\system32\config\DEFAULT.iobit
2015-08-12 17:22 - 2015-08-12 17:22 - 00069632 _____ C:\WINDOWS\system32\config\SAM.iobit
2015-08-12 17:22 - 2015-08-12 17:22 - 00024576 _____ C:\WINDOWS\system32\config\SECURITY.iobit
2015-08-12 16:41 - 2015-08-12 16:41 - 00000000 __SHD C:\found.000
2015-08-10 20:10 - 2015-08-10 20:10 - 00000000 ___RD C:\Users\G.S\3D Objects
2015-08-10 02:22 - 2015-08-12 17:37 - 00000000 ____D C:\Users\G.S\Desktop\Neuer Ordner
2015-08-09 23:15 - 2015-08-13 17:32 - 00000000 ____D C:\WINDOWS\Minidump
2015-08-09 22:17 - 2015-08-09 22:17 - 00000000 ____D C:\sh4ldr
2015-08-09 22:14 - 2015-08-09 22:14 - 00019984 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2015-08-09 22:14 - 2015-08-09 22:14 - 00000000 ____D C:\Program Files\Enigma Software Group
2015-08-09 15:37 - 2015-08-13 22:09 - 00098520 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-08-09 15:37 - 2015-08-13 22:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-08-09 14:30 - 2015-08-09 14:30 - 00000000 ____D C:\Users\G.S\AppData\Roaming\dlg
2015-08-09 14:15 - 2015-08-12 17:02 - 00000000 ____D C:\Users\G.S\AppData\Roaming\ProductData
2015-08-09 14:14 - 2015-08-09 14:24 - 223334912 _____ C:\WINDOWS\system32\SafenSoft_SysWatch.msi
2015-08-09 14:13 - 2015-08-12 18:08 - 00002204 _____ C:\Users\Public\Desktop\Advanced SystemCare 8.lnk
2015-08-09 14:13 - 2015-08-12 17:02 - 00000000 ____D C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2015-08-09 14:13 - 2015-08-09 14:28 - 00000000 ____D C:\Program Files\IObit
2015-08-09 14:13 - 2015-08-09 14:18 - 00000000 ____D C:\ProgramData\ProductData
2015-08-09 14:13 - 2015-08-09 14:18 - 00000000 ____D C:\ProgramData\IObit
2015-08-09 14:13 - 2015-08-09 14:14 - 00000000 ____D C:\Users\G.S\AppData\Roaming\IObit
2015-08-09 14:13 - 2015-08-09 14:13 - 00000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
2015-08-09 14:13 - 2015-08-09 14:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8
2015-08-09 14:13 - 2015-08-09 14:13 - 00000000 ____D C:\Program Files\Common Files\IObit
2015-08-09 13:50 - 2015-08-09 13:50 - 00380416 _____ C:\WINDOWS\system32\e73f19hl.exe
2015-08-09 13:49 - 2015-08-09 13:49 - 00000000 ____D C:\Users\G.S\AppData\Roaming\AVG
2015-08-09 13:49 - 2015-08-09 13:49 - 00000000 ____D C:\Users\G.S\AppData\Local\Avg
2015-08-09 13:49 - 2015-08-09 13:49 - 00000000 ____D C:\Program Files\AVG
2015-08-09 13:48 - 2015-08-09 14:07 - 00000000 ____D C:\ProgramData\AVG
2015-08-08 00:28 - 2015-08-08 00:28 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-08-07 23:57 - 2015-08-07 23:57 - 00000000 ____D C:\Users\G.S\AppData\Local\PeerDistRepub
2015-08-07 17:02 - 2015-08-07 23:59 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2015-08-07 17:01 - 2015-08-07 17:01 - 00002324 _____ C:\Users\Public\Desktop\Norton 360.LNK
2015-08-07 17:00 - 2015-08-07 17:01 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360
2015-08-07 17:00 - 2015-08-07 17:00 - 00000000 ____D C:\Program Files\Norton 360
2015-08-07 16:39 - 2015-08-07 16:39 - 00000000 ____D C:\Users\Public\Downloads\Norton
2015-08-07 16:37 - 2015-08-07 16:38 - 00000000 ____D C:\Users\G.S\AppData\Local\Comms
2015-08-06 23:01 - 2015-08-06 23:01 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2015-08-06 22:59 - 2015-08-06 22:59 - 170403328 _____ C:\Users\G.S\AppData\Local\Tempkis2015.exe
2015-08-06 22:59 - 2015-08-06 22:59 - 170245952 _____ (Kaspersky Lab) C:\Users\G.S\AppData\Local\Tempkis15_0_0_463fr_6152.exe
2015-08-06 20:23 - 2015-08-09 14:33 - 00000000 ___DC C:\WINDOWS\Panther
2015-08-06 20:22 - 2015-08-06 19:31 - 00000000 __SHD C:\Recovery
2015-08-06 20:18 - 2015-08-06 20:19 - 00000000 ____D C:\Windows.old
2015-08-06 20:16 - 2015-08-06 20:16 - 12589056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 09889792 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 05118024 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 05076480 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 04398080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 04350464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 04047288 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 03687936 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 03579904 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 03443200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 02878000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 02606080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 02207744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 02112512 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01867160 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01829376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01808224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-08-06 20:16 - 2015-08-06 20:16 - 01769056 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01714176 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01611264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01506816 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01395568 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01356368 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01341920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01275392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01181536 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01153536 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 01125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01112064 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01084416 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01043968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2015-08-06 20:16 - 2015-08-06 20:16 - 00987072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00962400 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00923648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00920576 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00918880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-08-06 20:16 - 2015-08-06 20:16 - 00916800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00902320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00896144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00877016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00868752 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2015-08-06 20:16 - 2015-08-06 20:16 - 00850784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2015-08-06 20:16 - 2015-08-06 20:16 - 00845664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00823336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00821248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00762896 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00754688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00751520 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00750592 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00741376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00729088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00713312 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00675328 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00669696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorDataService.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00667136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00587264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00548616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00520640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00507696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00506200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-08-06 20:16 - 2015-08-06 20:16 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00484864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00473088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00469856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2015-08-06 20:16 - 2015-08-06 20:16 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00445240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00442720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00420352 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00407616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00371200 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00369504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2015-08-06 20:16 - 2015-08-06 20:16 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00351072 _____ (Microsoft Corporation) C:\WINDOWS\system32\halmacpi.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00351072 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00301056 _____ C:\WINDOWS\system32\diagtrack_wininternal.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00285632 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00284672 _____ C:\WINDOWS\system32\diagtrack_win.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemcpl.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV2.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00265480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00257888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2015-08-06 20:16 - 2015-08-06 20:16 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00242264 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00193888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00191488 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00191144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00181088 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReInfo.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OmaDmAgent.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SignInOptions.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys
2015-08-06 20:16 - 2015-08-06 20:16 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00082616 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00054112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2015-08-06 20:16 - 2015-08-06 20:16 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\unenrollhook.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2015-08-06 20:16 - 2015-08-06 20:16 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2015-08-06 20:16 - 2015-08-06 20:16 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.PAL.Desktop.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmprc.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.ProxyStub.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00037376 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\VoiceActivationManager.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2015-08-06 20:16 - 2015-08-06 20:16 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00025088 _____ C:\WINDOWS\system32\LicenseManagerApi.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2015-08-06 20:12 - 2015-08-06 20:12 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-08-06 20:09 - 2015-08-07 00:05 - 00000000 ____D C:\Users\G.S\AppData\Local\MicrosoftEdge
2015-08-06 20:09 - 2015-08-06 20:09 - 00000000 ____D C:\WINDOWS\system32\XPSViewer
2015-08-06 20:09 - 2015-08-06 20:09 - 00000000 ____D C:\WINDOWS\system32\msmq
2015-08-06 20:09 - 2015-08-06 20:09 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2015-08-06 20:09 - 2015-08-06 20:09 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-08-06 20:09 - 2015-08-06 20:09 - 00000000 ____D C:\Program Files\MSBuild
2015-08-06 20:09 - 2015-08-06 20:09 - 00000000 ____D C:\inetpub
2015-08-06 20:09 - 2015-05-29 22:07 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-08-06 20:09 - 2015-05-29 22:07 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-06 20:09 - 2015-05-29 22:07 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-08-06 20:08 - 2015-08-06 20:09 - 00002387 _____ C:\Users\G.S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-08-06 20:06 - 2015-07-09 20:39 - 04847104 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2015-08-06 20:06 - 2015-07-09 20:36 - 05739520 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2015-08-06 20:06 - 2015-07-09 20:36 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2015-08-06 20:05 - 2015-08-06 20:05 - 00001051 _____ C:\Users\G.S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optionale Features.lnk
2015-08-06 20:05 - 2015-08-06 20:05 - 00000000 ____D C:\ProgramData\ATI
2015-08-06 20:03 - 2015-08-06 20:03 - 00000000 ____D C:\Users\G.S\AppData\Local\Publishers
2015-08-06 20:00 - 2015-08-06 20:00 - 00000020 ___SH C:\Users\G.S\ntuser.ini
2015-08-06 20:00 - 2015-08-06 20:00 - 00000000 ____D C:\Users\G.S\AppData\Local\TileDataLayer
2015-08-06 19:55 - 2015-08-06 19:55 - 00000000 _SHDL C:\Users\Default\Startmenü
2015-08-06 19:55 - 2015-08-06 19:55 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2015-08-06 19:55 - 2015-08-06 19:55 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2015-08-06 19:55 - 2015-08-06 19:55 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2015-08-06 19:55 - 2015-08-06 19:55 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2015-08-06 19:55 - 2015-08-06 19:55 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-08-06 19:55 - 2015-08-06 19:55 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2015-08-06 19:55 - 2015-08-06 19:55 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2015-08-06 19:55 - 2015-08-06 19:55 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2015-08-06 19:55 - 2015-08-06 19:55 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-08-06 19:55 - 2015-08-06 19:55 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2015-08-06 19:55 - 2015-08-06 19:55 - 00000000 _SHDL C:\Programme
2015-08-06 19:53 - 2015-08-06 19:53 - 00021532 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-08-06 19:43 - 2015-08-06 19:43 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2008
2015-08-06 19:43 - 2015-08-06 19:43 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2015-08-06 19:43 - 2015-08-06 19:43 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2008
2015-08-06 19:43 - 2015-08-06 19:43 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2015-08-06 19:42 - 2015-08-06 19:42 - 00001544 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-08-06 19:37 - 2015-08-06 19:37 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2015-08-06 19:34 - 2015-08-12 19:09 - 00000000 ____D C:\Users\G.S
2015-08-06 19:34 - 2015-08-06 20:00 - 00000000 ___RD C:\Users\G.S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-06 19:34 - 2015-08-06 19:34 - 00000000 _SHDL C:\Users\G.S\Startmenü
2015-08-06 19:34 - 2015-08-06 19:34 - 00000000 _SHDL C:\Users\G.S\Netzwerkumgebung
2015-08-06 19:34 - 2015-08-06 19:34 - 00000000 _SHDL C:\Users\G.S\Druckumgebung
2015-08-06 19:34 - 2015-08-06 19:34 - 00000000 _SHDL C:\Users\G.S\Documents\Eigene Musik
2015-08-06 19:34 - 2015-08-06 19:34 - 00000000 _SHDL C:\Users\G.S\Documents\Eigene Bilder
2015-08-06 19:34 - 2015-08-06 19:34 - 00000000 _SHDL C:\Users\G.S\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-08-06 19:34 - 2015-08-06 19:34 - 00000000 _SHDL C:\Users\G.S\AppData\Local\Verlauf
2015-08-06 19:34 - 2015-07-10 10:28 - 00000000 __RSD C:\Users\G.S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-08-06 19:34 - 2015-07-10 10:28 - 00000000 ___RD C:\Users\G.S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-08-06 19:34 - 2015-07-10 10:28 - 00000000 ___RD C:\Users\G.S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-08-06 19:34 - 2015-07-10 10:28 - 00000000 ____D C:\Users\G.S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-08-06 19:31 - 2015-08-07 16:59 - 02030034 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-08-06 19:29 - 2015-08-06 19:29 - 00060329 _____ C:\WINDOWS\system32\CCCInstall_201508061929391634.log
2015-08-06 19:29 - 2015-08-06 19:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-08-06 19:28 - 2015-08-06 19:38 - 00000000 ____D C:\ProgramData\Package Cache
2015-08-06 19:28 - 2015-08-06 19:28 - 00000000 ____D C:\Program Files\ATI Technologies
2015-08-06 19:27 - 2015-08-06 19:27 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2015-08-06 19:27 - 2015-08-06 19:27 - 00000000 ____D C:\Program Files\AMD
2015-08-06 19:27 - 2015-08-06 19:27 - 00000000 _____ C:\WINDOWS\ativpsrm.bin
2015-08-06 19:26 - 2015-08-06 19:26 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-08-06 19:25 - 2015-08-06 19:25 - 00020585 _____ C:\WINDOWS\system32\NetSetupMig.log
2015-08-06 18:57 - 2015-07-10 10:25 - 00000001 ___SH C:\BOOTNXT
2015-08-03 18:53 - 2015-08-03 18:53 - 00000000 ____D C:\Users\G.S\AppData\Local\Bohemia_Interactive
2015-08-03 18:52 - 2015-08-03 19:57 - 00000000 ____D C:\Users\G.S\AppData\Local\Arma 3 Launcher
2015-08-03 16:24 - 2015-08-03 16:25 - 00450560 _____ (RAD Game Tools, Inc.) C:\WINDOWS\system32\mss32.dll
2015-08-02 21:07 - 2015-08-06 19:54 - 00012354 _____ C:\WINDOWS\diagerr.xml
2015-08-02 21:07 - 2015-08-06 19:54 - 00011433 _____ C:\WINDOWS\diagwrn.xml
2015-08-02 18:59 - 2015-08-02 18:59 - 00000000 ___HD C:\$Windows.~WS
2015-07-31 22:19 - 2015-08-06 19:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-07-31 22:19 - 2015-07-31 22:19 - 00000000 ____D C:\Program Files\Common Files\Skype
2015-07-31 22:10 - 2015-08-07 17:00 - 00000000 ____D C:\WINDOWS\system32\Drivers\N360
2015-07-30 22:25 - 2015-07-30 22:25 - 00000000 ____D C:\Users\G.S\Tracing
2015-07-30 21:18 - 2015-07-30 21:18 - 00000000 ____D C:\Program Files\ESET
2015-07-30 13:11 - 2015-07-30 13:11 - 00000000 ____D C:\Users\G.S\AppData\Local\CEF
2015-07-29 19:46 - 2015-07-31 22:19 - 00000000 ___RD C:\Program Files\Skype
2015-07-16 02:12 - 2015-07-16 02:12 - 00378144 _____ C:\WINDOWS\system32\amdmiracast.dll
2015-07-16 02:12 - 2015-07-16 02:12 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc32.dll
2015-07-16 02:12 - 2015-07-16 02:12 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom32.dll
2015-07-16 02:11 - 2015-07-16 02:11 - 10094152 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx32.dll
2015-07-16 02:11 - 2015-07-16 02:11 - 07929616 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumdva.dll
2015-07-16 02:11 - 2015-07-16 02:11 - 07408936 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumdag.dll
2015-07-16 02:11 - 2015-07-16 02:11 - 01193904 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx32.dll
2015-07-16 02:11 - 2015-07-16 02:11 - 00133016 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxpag.dll
2015-07-16 02:11 - 2015-07-16 02:11 - 00102616 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9pag.dll
2015-07-16 02:04 - 2015-07-16 02:04 - 19503104 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys
2015-07-16 02:01 - 2015-07-16 02:01 - 00995342 _____ C:\WINDOWS\system32\amdocl_as32.exe
2015-07-16 02:01 - 2015-07-16 02:01 - 00798734 _____ C:\WINDOWS\system32\amdocl_ld32.exe
2015-07-16 02:01 - 2015-07-16 02:01 - 00203776 _____ C:\WINDOWS\system32\clinfo.exe
2015-07-16 02:00 - 2015-07-16 02:00 - 39714816 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl.dll
2015-07-16 01:59 - 2015-07-16 01:59 - 00059392 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2015-07-16 01:57 - 2015-07-16 01:57 - 22318592 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl12cl.dll
2015-07-16 01:35 - 2015-07-16 01:35 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle32.dll
2015-07-16 01:30 - 2015-07-16 01:30 - 05068288 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmantle32.dll
2015-07-16 01:29 - 2015-07-16 01:29 - 00123392 _____ C:\WINDOWS\system32\amdhdl32.dll
2015-07-16 01:26 - 2015-07-16 01:26 - 07500800 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc32.dll
2015-07-16 01:26 - 2015-07-16 01:26 - 00086528 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl32.dll
2015-07-16 01:25 - 2015-07-16 01:25 - 00039424 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl.dll
2015-07-16 01:22 - 2015-07-16 01:22 - 25299968 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atioglxx.dll
2015-07-16 01:21 - 2015-07-16 01:21 - 00660912 _____ C:\WINDOWS\system32\atiapfxx.blb
2015-07-16 01:21 - 2015-07-16 01:21 - 00367104 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2015-07-16 01:21 - 2015-07-16 01:21 - 00052224 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt.dll
2015-07-16 01:21 - 2015-07-16 01:21 - 00049152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl.dll
2015-07-16 01:20 - 2015-07-16 01:20 - 14302208 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd.dll
2015-07-16 01:18 - 2015-07-16 01:18 - 03471376 _____ C:\WINDOWS\system32\atiumdva.cap
2015-07-16 01:17 - 2015-07-16 01:17 - 00543744 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2015-07-16 01:17 - 2015-07-16 01:17 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2015-07-16 01:17 - 2015-07-16 01:17 - 00214528 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe
2015-07-16 01:17 - 2015-07-16 01:17 - 00204952 _____ C:\WINDOWS\system32\ativvsvl.dat
2015-07-16 01:17 - 2015-07-16 01:17 - 00189952 _____ C:\WINDOWS\system32\amdgfxinfo32.dll
2015-07-16 01:17 - 2015-07-16 01:17 - 00164352 _____ (AMD) C:\WINDOWS\system32\atitmmxx.dll
2015-07-16 01:17 - 2015-07-16 01:17 - 00157144 _____ C:\WINDOWS\system32\ativvsva.dat
2015-07-16 01:17 - 2015-07-16 01:17 - 00143872 _____ C:\WINDOWS\system32\atieah32.exe
2015-07-16 01:17 - 2015-07-16 01:17 - 00029184 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2015-07-16 01:14 - 2015-07-16 01:14 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll
2015-07-16 01:13 - 2015-07-16 01:13 - 00926720 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2015-07-16 01:13 - 2015-07-16 01:13 - 00532480 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys
2015-07-16 01:13 - 2015-07-16 01:13 - 00141824 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atigktxx.dll
2015-07-16 01:13 - 2015-07-16 01:13 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll
2015-07-16 01:12 - 2015-07-16 01:12 - 00670208 _____ (AMD) C:\WINDOWS\system32\coinst_15.20.dll
2015-07-16 01:12 - 2015-07-16 01:12 - 00102400 _____ C:\WINDOWS\system32\hsa-thunk.dll
2015-07-15 15:32 - 2015-07-09 19:42 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-07-15 15:32 - 2015-06-09 21:35 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpGroupPolicyExtension.dll
2015-07-15 15:31 - 2015-06-19 20:06 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.exe
2015-07-15 15:31 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmlmedia.dll

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-13 22:12 - 2014-08-07 00:38 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-08-13 22:11 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\sru
2015-08-13 22:07 - 2014-08-05 19:42 - 00001098 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-13 19:55 - 2015-07-10 10:20 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-08-13 17:12 - 2014-12-10 23:43 - 00000000 ____D C:\Program Files\Opera
2015-08-13 17:07 - 2015-07-10 11:55 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-08-13 17:07 - 2014-08-05 19:42 - 00001094 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-13 17:05 - 2015-07-10 08:59 - 00131072 ___SH C:\WINDOWS\system32\config\BBI
2015-08-13 17:04 - 2014-12-10 17:23 - 00000000 ____D C:\AdwCleaner
2015-08-13 16:58 - 2014-08-06 16:31 - 00000000 __SHD C:\Users\G.S\AppData\Local\EmieUserList
2015-08-13 16:58 - 2014-08-06 16:31 - 00000000 __SHD C:\Users\G.S\AppData\Local\EmieSiteList
2015-08-13 16:58 - 2014-08-05 22:09 - 00000000 ____D C:\ProgramData\Oracle
2015-08-13 16:57 - 2014-10-16 14:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-13 16:57 - 2014-10-16 14:23 - 00000000 ____D C:\Program Files\Java
2015-08-13 13:26 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\Microsoft.NET
2015-08-13 00:47 - 2015-06-01 18:15 - 00002198 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-12 21:24 - 2015-05-29 00:51 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2015-08-12 21:17 - 2015-05-29 00:51 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2015-08-12 19:09 - 2015-07-10 11:53 - 00327768 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-08-12 19:06 - 2015-07-10 15:12 - 00000000 ____D C:\WINDOWS\system32\Drivers\de-DE
2015-08-12 19:06 - 2015-07-10 10:28 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-12 19:06 - 2015-07-10 10:28 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-12 19:06 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\de-DE
2015-08-12 19:06 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-08-12 17:45 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\LogFiles
2015-08-12 17:02 - 2014-08-05 18:59 - 00000000 ____D C:\ProgramData\Norton
2015-08-12 16:58 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\registration
2015-08-10 19:45 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-08-09 14:42 - 2014-08-24 14:21 - 00000000 ____D C:\Users\G.S\AppData\Local\CrashDumps
2015-08-09 14:35 - 2015-05-17 14:37 - 00000000 ____D C:\Users\G.S\Desktop\ich
2015-08-09 14:33 - 2015-01-03 19:52 - 00000000 ____D C:\Users\G.S\Desktop\kevin
2015-08-09 14:33 - 2014-08-07 08:03 - 00000000 ___RD C:\Users\G.S\ich
2015-08-09 14:32 - 2015-06-30 18:31 - 00000000 ____D C:\Program Files\Steam
2015-08-08 15:11 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-08-08 00:11 - 2015-07-10 08:59 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2015-08-07 17:02 - 2015-07-10 10:28 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-08-07 17:02 - 2014-08-05 19:01 - 00103152 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT.SYS
2015-08-07 17:02 - 2014-08-05 19:01 - 00008178 _____ C:\WINDOWS\system32\Drivers\SYMEVENT.CAT
2015-08-07 13:11 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\AppCompat
2015-08-06 21:00 - 2015-07-10 10:28 - 00000000 ___RD C:\Users\Public
2015-08-06 21:00 - 2009-07-14 04:37 - 00000000 ____D C:\Users\Default.migrated
2015-08-06 20:25 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\restore
2015-08-06 20:23 - 2015-07-10 10:28 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-08-06 20:17 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-08-06 20:17 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\Provisioning
2015-08-06 20:09 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-08-06 20:09 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2015-08-06 20:09 - 2015-07-10 10:25 - 01014272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2015-08-06 20:09 - 2015-07-10 10:25 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2015-08-06 20:09 - 2015-07-10 10:25 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2015-08-06 20:09 - 2015-07-10 10:25 - 00265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2015-08-06 20:09 - 2015-07-10 10:25 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2015-08-06 20:09 - 2015-07-10 10:25 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2015-08-06 20:09 - 2015-07-10 10:25 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2015-08-06 20:09 - 2015-07-10 10:25 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2015-08-06 20:09 - 2015-07-10 10:25 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2015-08-06 20:09 - 2015-07-10 10:25 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2015-08-06 20:09 - 2015-07-10 10:25 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2015-08-06 20:09 - 2015-07-10 10:25 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2015-08-06 20:09 - 2015-07-10 10:25 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2015-08-06 20:09 - 2015-07-10 10:25 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2015-08-06 20:09 - 2015-07-10 10:25 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2015-08-06 20:09 - 2015-07-10 10:25 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2015-08-06 20:09 - 2015-07-10 10:25 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2015-08-06 20:09 - 2015-07-10 10:25 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2015-08-06 20:09 - 2015-07-10 10:25 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2015-08-06 20:09 - 2015-07-10 10:25 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2015-08-06 20:09 - 2015-07-10 10:25 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2015-08-06 20:09 - 2014-08-05 20:34 - 00000000 ___RD C:\Users\G.S\OneDrive
2015-08-06 20:06 - 2015-07-10 15:13 - 00000000 ____D C:\WINDOWS\OCR
2015-08-06 20:02 - 2015-07-10 10:28 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-08-06 20:02 - 2015-07-10 10:28 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-08-06 20:02 - 2015-07-10 10:28 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-08-06 20:01 - 2015-07-10 10:28 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-08-06 19:57 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\rescache
2015-08-06 19:55 - 2015-07-10 10:28 - 00000000 ____D C:\Program Files\Windows NT
2015-08-06 19:55 - 2015-07-10 08:59 - 00000000 __RHD C:\Users\Default
2015-08-06 19:52 - 2015-07-10 10:28 - 00000000 __RSD C:\WINDOWS\Media
2015-08-06 19:52 - 2015-07-10 10:28 - 00000000 __RHD C:\Users\Public\Libraries
2015-08-06 19:44 - 2015-07-10 10:28 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-08-06 19:44 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\Web
2015-08-06 19:44 - 2015-06-08 18:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2015-08-06 19:44 - 2015-06-01 18:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-08-06 19:44 - 2015-05-14 22:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ballerburg
2015-08-06 19:44 - 2015-02-16 16:29 - 00000000 ____D C:\Users\G.S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PokerStars.EU
2015-08-06 19:44 - 2015-02-08 05:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-08-06 19:44 - 2015-01-30 20:25 - 00000000 ____D C:\Users\G.S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp Erkennungs-Plug-in
2015-08-06 19:44 - 2015-01-30 20:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free M4a to MP3 Converter
2015-08-06 19:44 - 2015-01-02 02:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-08-06 19:44 - 2014-12-10 21:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2015-08-06 19:44 - 2014-11-08 17:54 - 00000000 ____D C:\Users\G.S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameSpy Arcade
2015-08-06 19:44 - 2014-10-19 17:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XMedia Recode
2015-08-06 19:44 - 2014-09-14 16:09 - 00000000 ____D C:\Users\G.S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-08-06 19:44 - 2014-09-01 19:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SiSoftware
2015-08-06 19:44 - 2014-08-09 21:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-08-06 19:44 - 2014-08-07 00:11 - 00000000 ____D C:\Program Files\Common Files\LogiShrd
2015-08-06 19:44 - 2014-08-06 21:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Desktop Clock
2015-08-06 19:44 - 2014-08-06 21:26 - 00000000 ____D C:\Users\G.S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-08-06 19:44 - 2014-08-06 21:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-08-06 19:44 - 2014-08-05 19:08 - 00000000 ____D C:\Users\G.S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NetConnect
2015-08-06 19:44 - 2009-07-14 06:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\twain_32
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\zh-TW
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\zh-HK
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\zh-CN
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\tr-TR
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\sv-SE
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\ru-RU
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\pt-PT
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\pt-BR
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\pl-PL
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\nl-NL
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\nb-NO
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\ko-KR
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\ja-JP
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\it-IT
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\IME
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\hu-HU
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\fr-FR
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\fi-FI
2015-08-06 19:39 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\el-GR
2015-08-06 19:38 - 2015-07-10 15:12 - 00000000 ____D C:\WINDOWS\DigitalLocker
2015-08-06 19:38 - 2015-07-10 10:28 - 00000000 __SHD C:\Program Files\Windows Sidebar
2015-08-06 19:38 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\schemas
2015-08-06 19:38 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-08-06 19:38 - 2015-07-10 10:28 - 00000000 ____D C:\Program Files\Microsoft.NET
2015-08-06 19:38 - 2015-06-07 20:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
2015-08-06 19:38 - 2015-05-15 18:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glorylogic
2015-08-06 19:38 - 2015-05-15 16:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\THQ
2015-08-06 19:38 - 2014-12-28 23:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atari
2015-08-06 19:38 - 2014-12-27 21:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA Games
2015-08-06 19:38 - 2014-11-08 17:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LucasArts
2015-08-06 19:38 - 2014-11-08 17:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameSpy Arcade
2015-08-06 19:38 - 2014-09-15 01:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zuxxez
2015-08-06 19:38 - 2014-08-15 17:49 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2015-08-06 19:37 - 2015-07-10 10:28 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-08-06 19:37 - 2014-09-02 17:22 - 00000000 ____D C:\Program Files\AMD AVT
2015-08-06 19:37 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\DVD Maker
2015-08-06 19:35 - 2015-07-10 10:28 - 00000000 ____D C:\WINDOWS\system32\Recovery
2015-08-06 19:35 - 2014-09-20 12:27 - 00000000 ____D C:\Users\G.S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2015-08-06 19:27 - 2014-08-06 16:15 - 00000000 ____D C:\AMD
2015-08-06 18:59 - 2009-07-14 06:34 - 00035936 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-06 18:59 - 2009-07-14 06:34 - 00035936 ____H C:\WINDOWS\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-06 18:57 - 2014-08-05 18:25 - 00008192 __RSH C:\BOOTSECT.BAK
2015-08-06 18:48 - 2015-07-10 15:39 - 00000000 ___HD C:\$Windows.~BT
2015-08-06 18:48 - 2014-08-07 00:13 - 00028429 _____ C:\WINDOWS\system32\lvcoinst.log
2015-08-06 16:32 - 2014-12-28 17:48 - 00000000 ____D C:\Users\G.S\Documents\Command & Conquer Generäle Stunde Null Data
2015-08-06 16:32 - 2014-10-25 22:23 - 00000000 ____D C:\Users\G.S\Documents\Arma 3
2015-08-06 16:32 - 2014-10-25 22:23 - 00000000 ____D C:\Users\G.S\AppData\Local\Arma 3
2015-08-06 16:32 - 2014-09-20 19:46 - 00000000 ____D C:\Program Files\Common Files\BattlEye
2015-08-06 16:32 - 2014-09-20 19:37 - 00000000 ____D C:\Users\G.S\Documents\ArmA 2
2015-08-02 18:33 - 2014-08-06 16:56 - 00000000 ____D C:\Users\G.S\AppData\Roaming\Skype
2015-08-01 12:41 - 2014-09-20 19:37 - 00000000 ____D C:\Users\G.S\AppData\Local\ArmA 2 OA
2015-08-01 04:09 - 2014-08-06 21:50 - 00000000 ____D C:\Program Files\Free Desktop Clock
2015-08-01 04:09 - 2014-08-06 17:03 - 00000000 ____D C:\Program Files\Common Files\Steam
2015-07-31 22:50 - 2014-08-05 22:10 - 00000000 ____D C:\Users\G.S\AppData\Roaming\.minecraft
2015-07-31 22:19 - 2014-08-06 16:56 - 00000000 ____D C:\ProgramData\Skype
2015-07-31 22:02 - 2014-08-06 21:50 - 00000000 ____D C:\Users\G.S\AppData\Roaming\Free Desktop Clock 3
2015-07-31 22:00 - 2014-08-05 19:42 - 00000000 ____D C:\Program Files\Google
2015-07-31 21:24 - 2015-04-06 21:08 - 00156160 ___SH C:\Users\G.S\Desktop\Thumbs.db
2015-07-31 15:37 - 2014-12-11 06:13 - 00000000 ____D C:\Users\G.S\.gimp-2.8
2015-07-16 01:25 - 2014-08-05 21:08 - 00000000 ____D C:\WINDOWS\system32\MRT

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-11-09 15:34 - 2015-04-06 21:39 - 0022328 _____ () C:\Users\G.S\AppData\Roaming\PnkBstrK.sys
2014-09-01 19:53 - 2014-09-02 17:31 - 14217216 _____ () C:\Users\G.S\AppData\Roaming\Sandra.mdb
2015-05-15 18:52 - 2015-05-15 18:56 - 0000026 _____ () C:\Users\G.S\AppData\Local\isoworkshop.ini
2014-08-14 22:26 - 2014-08-14 22:26 - 0001452 _____ () C:\Users\G.S\AppData\Local\RecConfig.xml
2014-12-14 07:23 - 2014-12-14 07:23 - 0018591 _____ () C:\Users\G.S\AppData\Local\recently-used.xbel
2015-08-06 22:59 - 2015-08-06 22:59 - 170245952 _____ (Kaspersky Lab) C:\Users\G.S\AppData\Local\Tempkis15_0_0_463fr_6152.exe
2015-08-06 22:59 - 2015-08-06 22:59 - 170403328 _____ () C:\Users\G.S\AppData\Local\Tempkis2015.exe

Einige Dateien in TEMP:
====================
C:\Users\G.S\AppData\Local\Temp\Quarantine.exe
C:\Users\G.S\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-08-06 19:24

==================== Ende vom raportu ============================

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:13-08-2015
durchgeführt von G.S (2015-08-13 22:52:46)
Gestartet von D:\download2
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1041671278-1757929836-1891683304-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1041671278-1757929836-1891683304-503 - Limited - Disabled)
G.S (S-1-5-21-1041671278-1757929836-1891683304-1000 - Administrator - Enabled) => C:\Users\G.S
Gast (S-1-5-21-1041671278-1757929836-1891683304-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1041671278-1757929836-1891683304-1002 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Norton 360 (Enabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: Norton 360 (Enabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}
FW: Norton 360 (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Ace of Spades (HKLM\...\Steam App 224540) (Version: - Jagex Limited)
Act of War - Direct Action (HKLM\...\{F9B915DF-B79C-4747-9BA3-9705A57DC717}) (Version: 1.00.000 - )
Act of War - High Treason (HKLM\...\{C08EBBFD-C565-472F-9354-5593B9873705}) (Version: 1.00.000 - )
Adobe Flash Player 18 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Photoshop Elements 7.0 (HKLM\...\Adobe Photoshop Elements 7) (Version: 7.0 - Adobe Systems Incorporated)
Advanced SystemCare 8 (HKLM\...\Advanced SystemCare 8_is1) (Version: 8.1.0 - IObit)
AMD Catalyst Control Center (HKLM\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Catalyst Install Manager (HKLM\...\{0BD03BF6-3A66-EC7F-5155-28A8D6C69409}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
Arma 2: Operation Arrowhead (HKLM\...\Steam App 33930) (Version: - Bohemia Interactive)
Arma 3 (HKLM\...\Steam App 107410) (Version: - Bohemia Interactive)
Auslogics DiskDefrag (HKLM\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 5.4.0.0 - Auslogics Labs Pty Ltd)
Ballerburg (HKLM\...\Ballerburg_is1) (Version: - )
Battle vs. Chess Demo (HKLM\...\Battle vs. Chess Demo_is1) (Version: 1.0 - Zuxxez Entertainment)
Battlefront Extreme 2.2 (HKLM\...\{AFD834CA-4579-49DF-9CF0-EA58822A7C2E}_is1) (Version: - )
BattlEye for OA Uninstall (HKLM\...\BattlEye for OA) (Version: - )
CameraHelperMsi (Version: 13.51.815.0 - Logitech) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.4954 - CDBurnerXP)
Command & Conquer(TM) Generäle (HKLM\...\InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}) (Version: 0.50.0000 - Electronic Arts)
Command & Conquer(TM) Generäle (Version: 0.50.0000 - Electronic Arts) Hidden
Command and Conquer(TM) Generäle Die Stunde Null (HKLM\...\InstallShield_{F3E9C243-122E-4D6B-ACC1-E1FEC02F6CA1}) (Version: 1.00.0000 - Electronic Arts)
Command and Conquer(TM) Generäle Die Stunde Null (Version: 1.00.0000 - Electronic Arts) Hidden
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Die Stunde Null UncutPatch 1.1 (HKLM\...\Die Stunde Null UncutPatch_is1) (Version: Die Stunde Null UncutPatch 1.1 - UC-Games)
erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version: - )
Free Desktop Clock 3.0 (HKLM\...\Free Desktop Clock_is1) (Version: - Drive Software Company)
Free M4a to MP3 Converter 8.3 (HKLM\...\Free M4a to MP3 Converter_is1) (Version: - ManiacTools.com)
GameSpy Arcade (HKLM\...\GameSpy Arcade) (Version: - )
Google Chrome (HKLM\...\Google Chrome) (Version: 44.0.2403.155 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.28.1 - Google Inc.) Hidden
Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (HKLM\...\{8E87B944-4815-3C5E-947F-5035C9F64362}.KB947789) (Version: 1 - Microsoft Corporation)
ISO Workshop 5.9 (HKLM\...\ISO Workshop_is1) (Version: - Glorylogic)
Java 8 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (HKLM\...\{8E87B944-4815-3C5E-947F-5035C9F64362}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU (HKLM\...\{76DAEC83-AF7B-333C-8A53-83D7C7D39199}) (Version: 9.0.30729 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 38.0.5 - Mozilla)
Mozilla Thunderbird 31.7.0 (x86 de) (HKLM\...\Mozilla Thunderbird 31.7.0 (x86 de)) (Version: 31.7.0 - Mozilla)
NetConnect deinstallieren (HKLM\...\NetConnect) (Version: - )
Norton 360 (HKLM\...\N360) (Version: 22.5.2.15 - Symantec Corporation)
Notepad++ (HKLM\...\Notepad++) (Version: 6.4.5 - Notepad++ Team)
NVIDIA PhysX (HKLM\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
Opera Stable 30.0.1835.52 (HKLM\...\Opera 30.0.1835.52) (Version: 30.0.1835.52 - Opera Software)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.313.1 - Tracker Software Products Ltd)
PokerStars.eu (HKLM\...\PokerStars.eu) (Version: - PokerStars.eu)
PunkBuster Services (HKLM\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
S.T.A.L.K.E.R. - Shadow of Chernobyl (HKLM\...\S.T.A.L.K.E.R. - Shadow of Chernobyl_is1) (Version: 1.0000 - THQ)
SigmaTel Audio (HKLM\...\{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}) (Version: 5.10.5102.0 - SigmaTel)
SiSoftware Sandra Lite 2014.SP3 (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2496}_is1) (Version: 20.42.2014.8 - SiSoftware)
Skype™ 7.7 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.7.103 - Skype Technologies S.A.)
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Star Wars Battlefront II (HKLM\...\{3D374523-CFDE-461A-827E-2A102E2AB365}) (Version: 1.0 - LucasArts)
Steam (HKLM\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Unturned (HKLM\...\Steam App 304930) (Version: - Nelson Sexton)
Winamp (HKLM\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.10 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
WORLD IN CONFLICT (HKLM\...\{F11ADC64-C89E-47F4-A0B3-3665FF859397}) (Version: 1.0.0.0 - Massive Entertainment AB)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\InprocServer32 -> C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{5999E1EE-711E-48D2-9884-851A709F543D}\localserver32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{A3CA1CF4-5F3E-4AC0-91B9-0D3716E1EAC3}\localserver32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncApi.dll (Microsoft Corporation)

==================== Wiederherstellungspunkte =========================

11-08-2015 19:44:14 11.8.2015 trojaner ist weg!!!!!!!
12-08-2015 16:50:09 Wiederherstellungsvorgang
13-08-2015 17:58:38 13.08 neues Java installiert.

==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:04 - 2015-05-29 02:03 - 00000938 ____N C:\WINDOWS\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {004F0FCF-4703-4B78-AE43-8B199B2B382B} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {06F3F1DF-FCBF-465D-8BE8-337EBC1C5B84} - \Microsoft\Windows\File Classification Infrastructure\Property Definition Sync -> Keine Datei <==== ACHTUNG
Task: {08C614E7-0E9E-4385-80A1-B57D741C85F0} - System32\Tasks\Microsoft\Windows\Location\Notifications => C:\WINDOWS\System32\LocationNotificationWindows.exe [2015-07-10] (Microsoft Corporation)
Task: {09FFCF78-1D67-4173-9761-77CA7E09A4EB} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {0B8B8675-BE25-4D7D-AAA3-50B1FA47252D} - System32\Tasks\Microsoft\Windows\CertificateServicesClient\AikCertEnrollTask
Task: {0C72B578-D676-414D-9F9C-FF0B216A314F} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe generaltel.dll,RunTelemetry -maintenance
Task: {0EE4C56B-4790-406D-A2A2-F2BFA205ED3C} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {102847C7-E6F5-4E23-9634-F81F2618EFBA} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {1110E2D5-C87F-4EA3-B1EF-48B0EAC0C9BE} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {13550F2C-A475-475F-AE32-F8D7682F8C40} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install => C:\WINDOWS\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {136B974B-7BF3-4F11-A533-D9B327ED6BDF} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {14023A78-8640-4F91-9C23-12712F9DED04} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1B125EB0-20B0-4A1F-9E9C-78CD1C9D2D06} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {1D129CD1-672D-4D21-B9F4-624595FC5C95} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1E59CAD0-D49B-4553-88DE-227F411F5D57} - System32\Tasks\Microsoft\Windows\Feedback\Siuf\DmClient => C:\WINDOWS\system32\dmclient.exe [2015-07-10] (Microsoft Corporation)
Task: {201CF893-BC56-46DA-8598-6F75905C9028} - System32\Tasks\Microsoft\Windows\LanguageComponentsInstaller\Uninstallation
Task: {210B29B6-A68A-4580-AC06-855728389B03} - System32\Tasks\Microsoft\Windows\CertificateServicesClient\KeyPreGenTask
Task: {287DB640-D9B1-4A23-9F3D-F85432030A1C} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {28D5AA69-FCC3-458D-829D-04EBDC73BA4F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-12] (Adobe Systems Incorporated)
Task: {2AD3362D-3D6D-4C3A-A2AA-5474C374EB0C} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2DC32A4D-BEAB-4026-9A76-2A1EC442ACB7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-04-23] (Piriform Ltd)
Task: {2E55AA51-E9B8-40B5-9EA6-0A24D15DDE63} - System32\Tasks\Microsoft\Windows\AppID\EDP Policy Manager
Task: {3A66299E-482E-4A1B-8AAD-1964357840EE} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files\Norton 360\Engine\22.5.2.15\SymErr.exe [2015-05-19] (Symantec Corporation)
Task: {3C480DB5-9C57-4D02-A3C4-6737DD9DD027} - System32\Tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup => C:\WINDOWS\system32\dstokenclean.exe [2015-07-10] (Microsoft Corporation)
Task: {3F628C45-4379-43B1-82E3-3D0AC5EF7C33} - System32\Tasks\Microsoft\Windows\Maps\MapsUpdateTask
Task: {489A34B7-9791-432B-A762-FEE4D0E9562E} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan => C:\WINDOWS\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {49C6F58F-98A3-4416-98C4-24BD457AC122} - System32\Tasks\Microsoft\Windows\Maps\MapsToastTask
Task: {4ADF1494-F5E2-4A89-BD99-D4198C75C5FA} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4AFA28DA-731C-4C36-B73C-E2DD42BECF1E} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {4BF1C744-3F5F-435D-87E1-F34F895EE962} - System32\Tasks\{321AFE30-0A47-4B7E-98EA-52A8F0F7F055} => pcalua.exe -a C:\Windows\Corel\uninst32.exe
Task: {4C61D4C0-ADF1-48A4-91D6-C64A8CE35E79} - System32\Tasks\Microsoft\Windows\WCM\WiFiTask => C:\WINDOWS\System32\WiFiTask.exe [2015-07-10] (Microsoft Corporation)
Task: {4C7B56E3-0356-4A04-B96E-6F65F43BEE41} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Automatic App Update
Task: {50B4CB51-43CB-4EDE-BBAD-B20D3A1F1A3F} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {51EF1EC4-6A17-43FA-968E-18A4F967D234} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {56D4CE5B-F875-43E8-B6F4-00CF0FB79D11} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-08-05] (Google Inc.)
Task: {5CE5009F-1260-496A-AE13-40BEF27A8EFB} - System32\Tasks\Microsoft\Windows\TPM\Tpm-HASCertRetr
Task: {5CFC6547-F84F-4299-A6D9-75E2E9304389} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot => C:\windows\system32\MusNotification.exe [2015-08-06] (Microsoft Corporation)
Task: {5D1A585A-6FC6-4EB2-BD3E-53726FC2D7AA} - System32\Tasks\ASC8_SkipUac_G.S => C:\Program Files\IObit\Advanced SystemCare 8\ASC.exe [2015-01-27] (IObit)
Task: {6451D5E9-DC34-446B-AD5B-9D75EFC36B38} - System32\Tasks\Microsoft\Windows\Location\WindowsActionDialog => C:\WINDOWS\System32\WindowsActionDialog.exe [2015-07-10] (Microsoft Corporation)
Task: {6CC2569D-EFD0-42A4-A0C0-FE506F7AF0ED} - System32\Tasks\Microsoft\Windows\WindowsUpdate\sih => C:\WINDOWS\System32\sihclient.exe [2015-07-10] (Microsoft Corporation)
Task: {7135AB65-C102-40AF-8A95-750F84E26CA4} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display => C:\windows\system32\MusNotification.exe [2015-08-06] (Microsoft Corporation)
Task: {774A65FA-58F3-4431-8C46-7078368F6A3E} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join => C:\WINDOWS\System32\dsregcmd.exe [2015-07-10] (Microsoft Corporation)
Task: {784017A0-41E3-423C-B4F3-CF8F69DF8C64} - System32\Tasks\Microsoft\Windows\LanguageComponentsInstaller\Installation
Task: {7846E873-72BC-474A-8C5A-856F0752DC4A} - System32\Tasks\Opera scheduled Autoupdate 1432837796 => C:\Program Files\Opera\launcher.exe [2015-05-18] (Opera Software)
Task: {797930BC-B506-4F11-9896-4C928674405C} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot => C:\WINDOWS\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {7C0654B5-C1CB-462A-B9F7-DCE562F692A8} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {7FD1B896-2FB2-4417-9CD0-32F283941201} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {824D03B3-D860-41EA-B5F0-6DDD04B7A3A0} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {83BA6D84-EFF6-495C-8AC1-5AA733E2CDD3} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton 360\Engine\22.5.2.15\WSCStub.exe [2015-07-16] (Symantec Corporation)
Task: {88742C4E-AF27-4EC0-AA61-61526B2F4601} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install => C:\WINDOWS\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {8AADE6A8-2137-462A-A3F6-621908C10AEC} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {8BD8D26D-9B78-4CF6-9D46-9E9201ECED6B} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => C:\WINDOWS\system32\MusNotification.exe [2015-08-06] (Microsoft Corporation)
Task: {8D42C4CD-99CA-474D-B7B4-8918F6FD0BFD} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files\Norton 360\Engine\22.5.2.15\SymErr.exe [2015-05-19] (Symantec Corporation)
Task: {97BE7E88-70D5-4449-85AC-A72E39F1B0D4} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {AE4D9080-D835-4DF8-AA34-705E02987787} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {B0812057-D950-4E68-B391-DB2AD99997AA} - System32\Tasks\Norton 360\Norton Autofix => C:\Program Files\Norton 360\Engine\22.5.2.15\SymErr.exe [2015-05-19] (Symantec Corporation)
Task: {B5102678-76C0-44A6-AFDB-18A673D681E9} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {BE145D02-1F5C-44BC-8680-99CB682AF70F} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {C29ABFB1-2868-49E1-8867-D58D9E76EBBB} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {C323C775-DD06-4D7E-A039-15D8340E7F8C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C7F8DC2D-9D31-4DFE-A34C-1A5E18943525} - System32\Tasks\Microsoft\Windows\Clip\License Validation => C:\WINDOWS\system32\ClipUp.exe [2015-08-06] (Microsoft Corporation)
Task: {C87BCE1D-2B9F-4537-9A1C-4EC4DF42F2E0} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {C8E1732D-AED0-4067-AC0A-322CF4811D67} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {CE610FE6-9B50-4922-965D-584131C622E8} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {D40D5914-E992-4562-A38D-C8FAB34A9F22} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {D641129E-9E0A-4A8F-8456-F7508EB67942} - System32\Tasks\{3A5783A2-6FED-44A0-BA7A-A56FEBCE8FC9} => Chrome.exe hxxp://ui.skype.com/ui/0/7.1.0.105/de/abandoninstall?page=tsMain
Task: {D982E219-39C5-46C2-A31C-D4775A53CDD1} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe
Task: {D9C31B2B-20BE-402C-8838-D89496CD324A} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DB84484D-C116-4831-9D7E-EBB701EE7957} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {DD1576BF-C204-4DF2-A716-01121284C0BC} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {DD87F70B-C8AE-4ECD-9AFC-288536510545} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics => C:\WINDOWS\system32\disksnapshot.exe [2015-07-10] (Microsoft Corporation)
Task: {DEA8182C-B471-4FCC-80C6-8456AA3F6701} - System32\Tasks\Uninstaller_SkipUac_G.S => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: {E3FBBA84-1DB8-48C0-9156-90AB8123E65E} - System32\Tasks\Microsoft\Windows\Sysmain\ResPriStaticDbSync
Task: {E5315AA3-0FA6-44DE-BE63-5FA7739572B7} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {ECC414BD-E640-4852-BFA5-A6C244BB0B9D} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {F31D7EF8-31AF-4E29-B9A4-6152E173C5CA} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => Rundll32.exe generaltel.dll,RunTelemetryW
Task: {F4CFDB69-AB0C-4DAD-AFD8-6CC6F672E3F1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-08-05] (Google Inc.)
Task: {F5E378FE-467A-4A80-958A-F8D44A4B6E9E} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {F90A0069-0051-4FB4-B57E-0A69A789DF67} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FB6B539D-57C2-4E39-98FD-C9D2BF921B63} - System32\Tasks\Microsoft\Windows\WindowsUpdate\sihboot => C:\WINDOWS\System32\sihclient.exe [2015-07-10] (Microsoft Corporation)
Task: {FD4FA901-31B1-4E6A-B81D-5796CF033048} - System32\Tasks\ASC8_PerformanceMonitor => C:\Program Files\IObit\Advanced SystemCare 8\Monitor.exe [2015-01-23] (IObit)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-08-06 20:16 - 2015-08-06 20:16 - 00025088 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
2015-08-09 14:13 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files\IObit\Advanced SystemCare 8\sqlite3.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 00301056 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll
2015-08-09 14:14 - 2014-10-16 10:26 - 00622880 _____ () C:\Program Files\IObit\LiveUpdate\ProductStatistics.dll
2014-08-06 21:50 - 2013-04-24 19:20 - 02007040 _____ () C:\Program Files\Free Desktop Clock\timeserv.exe
2014-11-09 15:33 - 2014-11-09 15:48 - 00076888 _____ () C:\Windows\system32\PnkBstrA.exe
2015-08-12 21:17 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2015-08-12 21:17 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2015-08-12 21:17 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2015-08-12 21:17 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2015-08-12 21:17 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2015-08-06 20:16 - 2015-08-06 20:16 - 01769056 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-09 14:13 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files\IObit\Advanced SystemCare 8\madExcept_.bpl
2015-08-09 14:13 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files\IObit\Advanced SystemCare 8\madBasic_.bpl
2015-08-09 14:13 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files\IObit\Advanced SystemCare 8\madDisAsm_.bpl
2015-08-06 20:16 - 2015-08-06 20:16 - 01769056 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2014-08-06 21:50 - 2013-06-07 03:06 - 01147392 _____ () C:\Program Files\Free Desktop Clock\Clock.dll
2012-06-18 17:24 - 2012-06-18 17:24 - 00260096 _____ () C:\Program Files\Notepad++\NppShell_05.dll
2015-07-10 10:24 - 2015-07-10 10:24 - 00288768 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-07-10 10:24 - 2015-07-10 10:24 - 00111104 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 04317696 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-07-10 10:25 - 2015-07-10 15:16 - 00377856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 01181184 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 01425920 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-08-13 00:47 - 2015-08-08 02:13 - 01405768 _____ () C:\Program Files\Google\Chrome\Application\44.0.2403.155\libglesv2.dll
2015-08-13 00:47 - 2015-08-08 02:13 - 00081224 _____ () C:\Program Files\Google\Chrome\Application\44.0.2403.155\libegl.dll
2015-08-13 00:47 - 2015-08-08 02:13 - 16393032 _____ () C:\Program Files\Google\Chrome\Application\44.0.2403.155\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Ahcache.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CoreMessagingRegistrar => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\StateRepository => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TileDataModelSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\UserManager => ""="Service"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\dell.com -> dell.com
IE trusted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\sony.com -> sony.com

IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\100sexlinks.com -> 100sexlinks.com

Da befinden sich 4787 mehr eingeschränkte Seiten.

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\windows\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\startupfolder: C:^Users^G.S^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Produktregistrierung.lnk => C:\Windows\pss\Logitech . Produktregistrierung.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\G.S\AppData\Local\Akamai\netsession_win.exe"
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
MSCONFIG\startupreg: CorelCorelDRAW10 Reminder => "C:\Program Files\Corel\Graphics10\Register\NAVBrowser.exe" /r /i "C:\Program Files\Corel\Graphics10\Register\NavLoad.ini"
MSCONFIG\startupreg: LWS => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide
MSCONFIG\startupreg: ManyCam => "C:\Program Files\ManyCam\ManyCam.exe" --silent
MSCONFIG\startupreg: SDTray => "C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe"
MSCONFIG\startupreg: SigmatelSysTrayApp => sttray.exe
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SpywareTerminatorShield => C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
MSCONFIG\startupreg: SpywareTerminatorUpdater => C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
MSCONFIG\startupreg: StartCCC => "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
MSCONFIG\startupreg: Steam => "C:\Program Files\Steam\steam.exe" -silent
MSCONFIG\startupreg: VirtualCloneDrive => "D:\VirtualCloneDrive\VCDDaemon.exe" /s
HKLM\...\StartupApproved\Run: => "SDTray"
HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\StartupApproved\Run: => "Advanced SystemCare 8"

==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppextcomobj.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppextcomobj.exe
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-32bit] => (Allow) LPort=808
FirewallRules: [{B54876FE-380C-432F-B596-E04E14DB8FDE}] => (Allow) D:\SteamLibrary\SteamApps\common\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{CC43A823-777F-4877-A5EF-8C3E71225F3D}] => (Allow) D:\SteamLibrary\SteamApps\common\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{4BEF4E7A-B92E-4529-900A-4392F4F9A6E0}] => (Allow) D:\SteamLibrary\SteamApps\common\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{5403DAB2-0877-4243-9503-E4AC586C7DCC}] => (Allow) D:\SteamLibrary\SteamApps\common\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{988F1D79-C7D0-4590-B975-B5315001F0D2}] => (Allow) D:\SteamLibrary\SteamApps\common\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{B33652AA-BEAD-44CE-B378-5E625F5E6534}] => (Allow) D:\SteamLibrary\SteamApps\common\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{D0FA0FBC-263B-4112-8908-24595254B0D0}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F71E4811-4AF7-435E-87B8-78ED1EEE2752}] => (Allow) C:\Program Files\Steam\Steam.exe
FirewallRules: [{8CD40489-4D13-4C45-8B0C-79E1F619FC25}] => (Allow) C:\Program Files\Steam\Steam.exe
FirewallRules: [{02CE46FC-57A6-40AE-9CEC-9986912456B2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{6DEDED7E-AB42-4FB7-954F-39484E99091F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{46E25B72-0E6C-474D-8EE7-0C73A047FC6F}] => (Allow) D:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe
FirewallRules: [{8ABF9BA9-978B-4E63-B59F-9EC6F8A992FD}] => (Allow) D:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe
FirewallRules: [{F8679997-DAFB-4579-8167-51E185D40C04}] => (Allow) D:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe
FirewallRules: [{02EC91DE-D617-4242-9381-642C5DC87A2F}] => (Allow) D:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe
FirewallRules: [{B1B8F3DE-A7A4-4722-A7D7-4495932A9CC8}] => (Allow) C:\Program Files\Winamp\winamp.exe
FirewallRules: [{CE9501CC-6F28-4D52-A48C-A1F68065B8B6}] => (Allow) C:\Program Files\Winamp\winamp.exe
FirewallRules: [{96A8E4FB-7F0B-461C-A80E-A9DEAECD53FE}] => (Allow) C:\Program Files\Sierra Entertainment\WORLD IN CONFLICT\wic_ds.exe
FirewallRules: [{814D9FCC-2E1A-4979-9CBE-50C51DEB4626}] => (Allow) C:\Program Files\Sierra Entertainment\WORLD IN CONFLICT\wic_ds.exe
FirewallRules: [{EE92B57B-8DFF-424A-A7E4-0A53BB1C6CA8}] => (Allow) C:\Program Files\Sierra Entertainment\WORLD IN CONFLICT\wic_online.exe
FirewallRules: [{FDE3978E-C836-45F3-9686-9F9CBEB8A0E9}] => (Allow) C:\Program Files\Sierra Entertainment\WORLD IN CONFLICT\wic_online.exe
FirewallRules: [{9FDEDD44-95A7-4F9A-B692-7B1B0A406898}] => (Allow) C:\Program Files\Sierra Entertainment\WORLD IN CONFLICT\wic.exe
FirewallRules: [{0892B450-FBDA-427D-A613-4AFE411CDBB2}] => (Allow) C:\Program Files\Sierra Entertainment\WORLD IN CONFLICT\wic.exe
FirewallRules: [{F7F130FE-D616-49D2-8548-F180E998D169}] => (Allow) C:\Program Files\Adobe\Photoshop Elements 7.0\AdobePhotoshopElementsMediaServer.exe
FirewallRules: [{C4809315-ACFB-4F69-9931-8FFB7F35D0FE}] => (Allow) C:\Program Files\Adobe\Photoshop Elements 7.0\AdobePhotoshopElementsMediaServer.exe
FirewallRules: [{7CEF1A47-4134-44CB-8F5F-928CE1D88DFF}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{D37017FF-4BCD-4DED-8A28-3109F336DFF4}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{3BBBCD1B-6D83-4855-ADF4-6E1BBEFAD168}] => (Allow) C:\Windows\System32\PnkBstrB.exe
FirewallRules: [{6DCB50D5-F470-484C-AD01-F7E3BD05F1C0}] => (Allow) C:\Windows\System32\PnkBstrB.exe
FirewallRules: [{6DBBF976-6608-458A-A78C-C1620D7B4B44}] => (Allow) C:\Windows\System32\PnkBstrA.exe
FirewallRules: [{8489CF73-51E1-4637-AC1E-4EE8BFB9F551}] => (Allow) C:\Windows\System32\PnkBstrA.exe
FirewallRules: [{EF779361-E549-4994-94B4-1F0E0B85AC33}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2014.SP3\WNt500x86\RpcSandraSrv.exe
FirewallRules: [{72E584DF-7461-40B3-B0DF-F12C0D8D52C3}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2014.SP3\RpcAgentSrv.exe
FirewallRules: [{4D95ACF8-7457-4983-93EB-AA7BF4A5B3AE}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{2D0E068B-4CBF-42B3-9DC7-5FCC765FB856}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/13/2015 05:58:55 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (08/13/2015 05:22:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: OHub.exe, Version: 16.0.6106.2350, Zeitstempel: 0x55c40ea5
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10240.16430, Zeitstempel: 0x55c599e6
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000e1267
ID des fehlerhaften Prozesses: 0x1290
Startzeit der fehlerhaften Anwendung: 0xOHub.exe0
Pfad der fehlerhaften Anwendung: OHub.exe1
Pfad des fehlerhaften Moduls: OHub.exe2
Berichtskennung: OHub.exe3
Vollständiger Name des fehlerhaften Pakets: OHub.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: OHub.exe5

Error: (08/13/2015 01:33:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: OHub.exe, Version: 16.0.6106.2350, Zeitstempel: 0x55c40ea5
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10240.16430, Zeitstempel: 0x55c599e6
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000e1267
ID des fehlerhaften Prozesses: 0x1bb0
Startzeit der fehlerhaften Anwendung: 0xOHub.exe0
Pfad der fehlerhaften Anwendung: OHub.exe1
Pfad des fehlerhaften Moduls: OHub.exe2
Berichtskennung: OHub.exe3
Vollständiger Name des fehlerhaften Pakets: OHub.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: OHub.exe5

Error: (08/12/2015 11:24:38 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (08/12/2015 11:24:37 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Bei der Aktivierung der App „Microsoft.WindowsStore_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (08/12/2015 10:24:44 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (08/12/2015 10:24:43 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Bei der Aktivierung der App „Microsoft.WindowsStore_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (08/12/2015 09:24:37 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Bei der Aktivierung der App „Microsoft.WindowsStore_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (08/12/2015 09:19:45 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm SDUpdate.exe, Version 2.4.40.94 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: c48

Startzeit: 01d0d533b9b1b382

Beendigungszeit: 9902

Anwendungspfad: C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe

Berichts-ID: 09a3b3d0-4127-11e5-93de-001372dd70b3

Vollständiger Name des fehlerhaften Pakets:

Auf das fehlerhafte Paket bezogene Anwendungs-ID:

Error: (08/12/2015 08:54:41 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Bei der Aktivierung der App „Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe!Microsoft.MicrosoftOfficeHub“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


Systemfehler:
=============
Error: (08/13/2015 05:22:58 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (08/13/2015 05:08:24 PM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT)
Description: 1053WSearchNicht verfügbar{9E175B6D-F52A-11D8-B9A5-505054503030}

Error: (08/13/2015 05:08:24 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (08/13/2015 05:08:24 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.

Error: (08/13/2015 05:07:10 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Net.Tcp-Listeneradapter" ist vom Dienst "Net.Tcp-Portfreigabedienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058

Error: (08/13/2015 05:05:04 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session3" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/13/2015 05:04:37 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Spybot-S&D 2 Updating Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/13/2015 05:04:37 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/13/2015 05:04:37 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Spybot-S&D 2 Security Center Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/13/2015 05:04:37 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Message Queuing" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office:
=========================
Error: (08/13/2015 05:58:55 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert

Error: (08/13/2015 05:22:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: OHub.exe16.0.6106.235055c40ea5ntdll.dll10.0.10240.1643055c599e6c0000374000e1267129001d0d5dbcc2a42adC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.6106.23501.0_x86__8wekyb3d8bbwe\OHub.exeC:\WINDOWS\SYSTEM32\ntdll.dll8b7aa727-a5de-4adf-8cf4-9149fcea7904Microsoft.MicrosoftOfficeHub_17.6106.23501.0_x86__8wekyb3d8bbweMicrosoft.MicrosoftOfficeHub

Error: (08/13/2015 01:33:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: OHub.exe16.0.6106.235055c40ea5ntdll.dll10.0.10240.1643055c599e6c0000374000e12671bb001d0d5bbe49d4c40C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.6106.23501.0_x86__8wekyb3d8bbwe\OHub.exeC:\WINDOWS\SYSTEM32\ntdll.dllcb80cdc2-7d22-4b52-b727-60d09cae734bMicrosoft.MicrosoftOfficeHub_17.6106.23501.0_x86__8wekyb3d8bbweMicrosoft.MicrosoftOfficeHub

Error: (08/12/2015 11:24:38 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2147023170

Error: (08/12/2015 11:24:37 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Microsoft.WindowsStore_8wekyb3d8bbwe!App-2147023170

Error: (08/12/2015 10:24:44 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2147023170

Error: (08/12/2015 10:24:43 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Microsoft.WindowsStore_8wekyb3d8bbwe!App-2147023170

Error: (08/12/2015 09:24:37 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Microsoft.WindowsStore_8wekyb3d8bbwe!App-2147023170

Error: (08/12/2015 09:19:45 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: SDUpdate.exe2.4.40.94c4801d0d533b9b1b3829902C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe09a3b3d0-4127-11e5-93de-001372dd70b3

Error: (08/12/2015 08:54:41 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe!Microsoft.MicrosoftOfficeHub-2147023170


CodeIntegrity:
===================================
Date: 2015-08-13 22:49:57.418
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.

Date: 2015-08-13 22:49:57.392
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.

Date: 2015-08-13 22:49:57.368
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.

Date: 2015-08-13 22:49:57.343
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.

Date: 2015-08-13 22:49:57.318
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.

Date: 2015-08-13 22:49:57.294
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.

Date: 2015-08-13 22:49:57.268
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.

Date: 2015-08-13 22:49:57.241
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.

Date: 2015-08-13 22:49:57.216
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.

Date: 2015-08-13 22:49:57.192
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Processor: Intel(R) Pentium(R) D CPU 3.00GHz
Prozentuale Nutzung des RAM: 70%
Installierter physikalischer RAM: 2046.14 MB
Verfügbarer physikalischer RAM: 602.32 MB
Summe virtueller Speicher: 4094.14 MB
Verfügbarer virtueller Speicher: 2043.78 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:145.96 GB) (Free:21.07 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: () (Fixed) (Total:149.01 GB) (Free:101.54 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 23F12D67)
Partition 1: (Not Active) - (Size=47 MB) - (Type=DE)
Partition 2: (Active) - (Size=146 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=3 GB) - (Type=DB)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 149 GB) (Disk ID: 00000081)
Partition 1: (Not Active) - (Size=149 GB) - (Type=07 NTFS)

==================== Ende vom raportu ============================

Leider hast du unsere Anleitung nicht richtig befolgt:

Gestartet von D:\download2

Bitte alle Tools direkt auf den Desktop downloaden bzw. dorthin verschieben und vom Desktop starten, da unsere Anleitungen daraufhin ausgelegt sind.
Zudem lassen sich dann am Ende der Bereinigung alle verwendeten Tools sehr einfach entfernen. Alle Tools bis zum Ende der Bereinigung auf dem Desktop lassen, evtl. benötigen wir manche öfter.

FRST jetzt nicht nochmal starten, es war nur ein Hinweis, dass du bitte fortan alle unsere Tools auf den Desktop ablegst!

Und:

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

ohh Sorry...

Ja ok...werde nun alles so machen wie mir es beschrieben wird...

Nochmals Sorry ..

Und bitte auch an die Virenscanner-Logs denken. Wie in der ersten Antwort von mir beschrieben.

Die Virenscanner haben nix gefunden. Ich benutze den Norten 360.

Malwarebytes hast du aber auch auf dem Rechner...

ok..ich lasse Mailwarebyts..mal scannen..

Lies doch bitte was ich in der ersten Antwort gepostet habe

ok..hier das Ergebnis von Malwarebyts . ich hoffe das ich alles richtig gemacht habe.

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 13.08.2015
Suchlaufzeit: 23:35
Protokolldatei: mal.txt
Administrator: Ja

Version: 2.1.8.1057
Malware-Datenbank: v2015.08.13.06
Rootkit-Datenbank: v2015.08.06.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x86
Dateisystem: NTFS
Benutzer: G.S

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 383348
Abgelaufene Zeit: 29 Min., 47 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
         

Du solltest keine neuen Scans machen, sondern vorhandene Logs mit Funden posten wenn es welche gab.
Außerdem ist das Log unvollständig

sorry Logs mit Funden gab es nicht...
Bin halt ne Frau die sich mit PC´s nicht so gut auskennt.

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.